Only use the server provided mechs if Client:allowed-mechanisms have not been set
Review Request #3590 — Created Oct. 17, 2024 and submitted — Latest diff uploaded
This fixes an issue where the server provided mechanisms would always overwrite whatever the user set which is the complete opposite of what we want as servers don't always advertise all of their mechanisms or any in some cases.
Set mechanisms (manually) in the cli and verified it only tried those mechanisms.